{"id":94450,"date":"2020-09-17T07:42:44","date_gmt":"2020-09-17T05:42:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost"},"modified":"2020-09-17T07:42:44","modified_gmt":"2020-09-17T05:42:44","slug":"iaas-152-fz-itak-vam-nuzhna-bezopasnost","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost","title":{"rendered":"IaaS 152-FZ: tak\u017ee pot\u0159ebujete zabezpe\u010den\u00ed","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"IaaS 152-FZ: tak\u017ee pot\u0159ebujete zabezpe\u010den\u00ed\" src=\"\/wp-content\/uploads\/2020\/09\/d91a5d152754f82316e0027fd3447b53.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>A\u0165 u\u017e se m\u00fdty a legendy obklopuj\u00edc\u00ed shodu se z\u00e1konem 152-FZ prob\u00edraj\u00ed jakkoli, v\u017edy n\u011bco z\u016fst\u00e1v\u00e1 nepov\u0161imnuto. Dnes bychom cht\u011bli prodiskutovat n\u011bkter\u00e9 m\u00e9n\u011b z\u0159ejm\u00e9 nuance, se kter\u00fdmi se mohou setkat jak velk\u00e9 spole\u010dnosti, tak i mal\u00e9 podniky:<\/p>\n<ul>\n<li>\n<p>drobnosti klasifikace osobn\u00edch \u00fadaj\u016f podle kategori\u00ed \u2014 kdy\u017e mal\u00fd internetov\u00fd obchod shroma\u017e\u010fuje data pat\u0159\u00edc\u00ed do speci\u00e1ln\u00ed kategorie, ani\u017e by o tom v\u011bd\u011bl;<\/p>\n<\/li>\n<li>\n<p>kde lze uchov\u00e1vat z\u00e1lohy shrom\u00e1\u017ed\u011bn\u00fdch osobn\u00edch \u00fadaj\u016f a prov\u00e1d\u011bt s nimi operace;<\/p>\n<\/li>\n<li>\n<p>\u010d\u00edm se li\u0161\u00ed osv\u011bd\u010den\u00ed a z\u00e1v\u011br o shod\u011b, jak\u00e9 dokumenty v\u016fbec \u017e\u00e1dat od poskytovatele a podobn\u011b.<\/p>\n<\/li>\n<\/ul>\n<p>Nakonec se s v\u00e1mi pod\u011bl\u00edme o na\u0161e vlastn\u00ed zku\u0161enosti z procesu certifikace. Jdeme na to!<\/p>\n<p><em>Odborn\u00edkem v dne\u0161n\u00edm \u010dl\u00e1nku bude<strong> Alexej Afanasjev<\/strong>, specialista na ot\u00e1zky informa\u010dn\u00ed bezpe\u010dnosti cloudov\u00fdch poskytovatel\u016f \u201eIT-GRAD\u201c a #CloudMTS (sou\u010d\u00e1st skupiny MTS).<\/em><\/p>\n<h2>Drobnosti klasifikace<\/h2>\n<p>\u010casto se setk\u00e1v\u00e1me s p\u0159\u00e1n\u00edm klienta rychle, bez auditu informa\u010dn\u00edho syst\u00e9mu, ur\u010dit po\u017eadovanou \u00farove\u0148 zabezpe\u010den\u00ed pro IS pr\u00e1vn\u00edch osobn\u00edch \u00fadaj\u016f. N\u011bkter\u00e9 materi\u00e1ly na internetu o t\u00e9to problematice vytv\u00e1\u0159ej\u00ed myln\u00fd dojem, \u017ee se jedn\u00e1 o jednoduch\u00fd \u00fakol a ud\u011blat chybu je relativn\u011b obt\u00ed\u017en\u00e9.<\/p>\n<p>Pro ur\u010den\u00ed \u00farovn\u011b zabezpe\u010den\u00ed je nutn\u00e9 ch\u00e1pat, jak\u00e1 data budou shroma\u017e\u010fov\u00e1na a zpracov\u00e1v\u00e1na IS klienta. N\u011bkdy je obt\u00ed\u017en\u00e9 jednozna\u010dn\u011b ur\u010dit po\u017eadavky na ochranu a kategorii osobn\u00edch \u00fadaj\u016f, s nimi\u017e podnik operuje. Tyt\u00e9\u017e typy osobn\u00edch \u00fadaj\u016f mohou b\u00fdt zcela odli\u0161n\u011b hodnoceny a klasifikov\u00e1ny. Proto se v n\u011bkter\u00fdch p\u0159\u00edpadech m\u016f\u017ee n\u00e1zor podnik\u00e1n\u00ed li\u0161it od n\u00e1zoru auditora nebo dokonce kontrolora. Pod\u00edvejme se na n\u011bkolik p\u0159\u00edklad\u016f.<\/p>\n<p><strong>Automobilov\u00fd park.<\/strong> Na prvn\u00ed pohled se to zd\u00e1 jako tradi\u010dn\u00ed forma podnik\u00e1n\u00ed. Mnoho autopark\u016f funguje po desetilet\u00ed a jejich majitel\u00e9 naj\u00edmaj\u00ed fyzick\u00e9 osoby, jednotlivce. Obvykle \u00fadaje zam\u011bstnanc\u016f spadaj\u00ed pod po\u017eadavky UZ-4. Nicm\u00e9n\u011b pro pr\u00e1ci s \u0159idi\u010di je pot\u0159eba nejen shroma\u017e\u010fovat osobn\u00ed \u00fadaje, ale tak\u00e9 prov\u00e1d\u011bt zdravotn\u00ed kontroly v are\u00e1lu autoparku p\u0159ed zah\u00e1jen\u00edm sm\u011bny, a shrom\u00e1\u017ed\u011bn\u00e9 informace okam\u017eit\u011b spadaj\u00ed do kategorie zdravotnick\u00fdch \u00fadaj\u016f \u2013 to jsou osobn\u00ed \u00fadaje zvl\u00e1\u0161tn\u00ed kategorie. Krom\u011b toho m\u016f\u017ee autopark vy\u017eadovat potvrzen\u00ed, kter\u00e9 bude d\u00e1le uchov\u00e1v\u00e1no v osobn\u00edm spisu \u0159idi\u010de. Sken takov\u00e9ho potvrzen\u00ed v elektronick\u00e9 podob\u011b obsahuje \u00fadaje o zdravotn\u00edm stavu, osobn\u00ed \u00fadaje zvl\u00e1\u0161tn\u00ed kategorie. To znamen\u00e1, \u017ee UZ-4 ji\u017e nebude sta\u010dit, minim\u00e1ln\u011b bude pot\u0159eba UZ-3.<\/p>\n<p><strong>Internetov\u00fd obchod. <\/strong>Na prvn\u00ed pohled se zd\u00e1, \u017ee shroma\u017e\u010fovan\u00e9 jm\u00e9na, e-maily a telefonn\u00ed \u010d\u00edsla spadaj\u00ed do ve\u0159ejn\u00e9 kategorie. Nicm\u00e9n\u011b pokud va\u0161i z\u00e1kazn\u00edci uv\u00e1d\u011bj\u00ed gastronomick\u00e9 preference, nap\u0159\u00edklad halal nebo ko\u0161er, takov\u00e9 informace mohou b\u00fdt pova\u017eov\u00e1ny za \u00fadaje o n\u00e1bo\u017eensk\u00e9 p\u0159\u00edslu\u0161nosti a p\u0159esv\u011bd\u010den\u00ed. Proto p\u0159i kontrole nebo prov\u00e1d\u011bn\u00ed jin\u00fdch kontroln\u00edch \u010dinnost\u00ed m\u016f\u017ee inspektor pova\u017eovat shrom\u00e1\u017ed\u011bn\u00e9 \u00fadaje za speci\u00e1ln\u00ed kategorii osobn\u00edch \u00fadaj\u016f. Pokud by internetov\u00fd obchod shroma\u017e\u010foval informace o tom, zda jeho z\u00e1kazn\u00edk d\u00e1v\u00e1 p\u0159ednost masu nebo ryb\u00e1m, mohly by b\u00fdt tyto \u00fadaje pova\u017eov\u00e1ny za dal\u0161\u00ed osobn\u00ed \u00fadaje. Mimochodem, co d\u011blat s vegetari\u00e1ny? To by tak\u00e9 mohlo b\u00fdt pova\u017eov\u00e1no za filozofick\u00e9 p\u0159esv\u011bd\u010den\u00ed, kter\u00e9 spad\u00e1 do speci\u00e1ln\u00ed kategorie. Na druhou stranu to m\u016f\u017ee b\u00fdt jen postoj \u010dlov\u011bka, kter\u00fd vylou\u010dil maso ze sv\u00e9 stravy. Bohu\u017eel neexistuje \u017e\u00e1dn\u00e1 tabulka, kter\u00e1 by jednozna\u010dn\u011b ur\u010dila kategorii osobn\u00edch \u00fadaj\u016f v takov\u00fdch \u201ejemn\u00fdch\u201c situac\u00edch.<\/p>\n<p><strong>Reklamn\u00ed agentura <\/strong>s pomoc\u00ed n\u011bjak\u00e9 z\u00e1padn\u00ed cloudov\u00e9 slu\u017eby zpracov\u00e1v\u00e1 ve\u0159ejn\u011b dostupn\u00e9 \u00fadaje sv\u00fdch klient\u016f \u2014 cel\u00e1 jm\u00e9na, e-mailov\u00e9 adresy a telefonn\u00ed \u010d\u00edsla. Tyto anketn\u00ed \u00fadaje se samoz\u0159ejm\u011b vztahuj\u00ed k osobn\u00edm \u00fadaj\u016fm. Vznik\u00e1 ot\u00e1zka: je leg\u00e1ln\u00ed prov\u00e1d\u011bt takov\u00e9 zpracov\u00e1n\u00ed? Je v\u016fbec mo\u017en\u00e9 p\u0159em\u00eds\u0165ovat takov\u00e9 \u00fadaje bez anonymizace za hranice \u010cR, nap\u0159\u00edklad uchov\u00e1vat z\u00e1lohy v n\u011bjak\u00fdch zahrani\u010dn\u00edch cloudech? Samoz\u0159ejm\u011b, \u017ee ano. Agentura m\u00e1 pr\u00e1vo uchov\u00e1vat tyto \u00fadaje i mimo \u010cR, nicm\u00e9n\u011b p\u016fvodn\u00ed sb\u011br, dle na\u0161eho z\u00e1konod\u00e1rstv\u00ed, je nutn\u00e9 prov\u00e1d\u011bt na \u00fazem\u00ed \u010cR. Pokud z\u00e1lohujete takov\u00e9 informace, spol\u00e9h\u00e1te se na jejich z\u00e1klad\u011b na n\u011bjakou statistiku, prov\u00e1d\u00edte v\u00fdzkumy nebo s nimi vykon\u00e1v\u00e1te n\u011bjak\u00e9 jin\u00e9 operace \u2014 to v\u0161e lze d\u011blat i na z\u00e1padn\u00edch zdroj\u00edch. Kl\u00ed\u010dov\u00fdm bodem z hlediska legislativy je, kde prob\u00edh\u00e1 sb\u011br osobn\u00edch \u00fadaj\u016f. Proto je d\u016fle\u017eit\u00e9 nepl\u00e9st p\u016fvodn\u00ed sb\u011br a zpracov\u00e1n\u00ed.<\/p>\n<p>Jak vypl\u00fdv\u00e1 z t\u011bchto kr\u00e1tk\u00fdch p\u0159\u00edklad\u016f, pr\u00e1ce s osobn\u00edmi \u00fadaji nen\u00ed v\u017edy jednozna\u010dn\u00e1 a jednoduch\u00e1. Je pot\u0159eba nejen v\u011bd\u011bt, \u017ee s nimi pracujete, ale tak\u00e9 je spr\u00e1vn\u011b klasifikovat, rozum\u011bt tomu, jak funguj\u00ed informa\u010dn\u00ed syst\u00e9my, abyste spr\u00e1vn\u011b ur\u010dili po\u017eadovanou \u00farove\u0148 ochrany. V n\u011bkter\u00fdch p\u0159\u00edpadech se m\u016f\u017ee objevit ot\u00e1zka, jak\u00fd objem osobn\u00edch \u00fadaj\u016f je skute\u010dn\u011b pot\u0159ebn\u00fd pro \u010dinnost organizace. Mohlo by b\u00fdt mo\u017en\u00e9 se vzd\u00e1t nejz\u00e1va\u017en\u011bj\u0161\u00edch nebo prost\u011b nadbyte\u010dn\u00fdch \u00fadaj\u016f? Krom\u011b toho regul\u00e1tor doporu\u010duje anonymizovat osobn\u00ed \u00fadaje tam, kde je to mo\u017en\u00e9.&nbsp;<\/p>\n<p>Jak ji\u017e bylo zm\u00edn\u011bno v\u00fd\u0161e, m\u016f\u017eete se n\u011bkdy setkat s t\u00edm, \u017ee kontroln\u00ed org\u00e1ny interpretuje shrom\u00e1\u017ed\u011bn\u00e9 osobn\u00ed \u00fadaje pon\u011bkud jinak, ne\u017e jak jste je posoudili vy sami.<\/p>\n<p>Samoz\u0159ejm\u011b, m\u016f\u017eete si vz\u00edt na pomoc aud\u00edtora nebo syst\u00e9mov\u00e9ho integr\u00e1tora, ale bude \"pomocn\u00edk\" odpov\u011bdn\u00fd za zvolen\u00e9 rozhodnut\u00ed v p\u0159\u00edpad\u011b kontroly? Je t\u0159eba poznamenat, \u017ee odpov\u011bdnost v\u017edy le\u017e\u00ed na vlastn\u00edkovi informa\u010dn\u00edho syst\u00e9mu osobn\u00edch \u00fadaj\u016f \u2013 oper\u00e1torovi osobn\u00edch \u00fadaj\u016f. Proto, kdy\u017e spole\u010dnost prov\u00e1d\u00ed takov\u00e9 pr\u00e1ce, je d\u016fle\u017eit\u00e9 obr\u00e1tit se na v\u00e1\u017en\u00e9 hr\u00e1\u010de na trhu t\u011bchto slu\u017eeb, nap\u0159\u00edklad na spole\u010dnosti, kter\u00e9 prov\u00e1d\u011bj\u00ed atesta\u010dn\u00ed pr\u00e1ce. Atesta\u010dn\u00ed spole\u010dnosti maj\u00ed bohat\u00e9 zku\u0161enosti s prov\u00e1d\u011bn\u00edm takov\u00fdch prac\u00ed.<\/p>\n<h2>Mo\u017enosti v\u00fdstavby informa\u010dn\u00edho syst\u00e9mu osobn\u00edch \u00fadaj\u016f<\/h2>\n<p>Vybudov\u00e1n\u00ed ISPDn nen\u00ed pouze technick\u00fdm, ale tak\u00e9 do zna\u010dn\u00e9 m\u00edry pr\u00e1vn\u00edm probl\u00e9mem. IT \u0159editel nebo \u0159editel pro bezpe\u010dnost by se m\u011bl ur\u010dit\u011b poradit s pr\u00e1vn\u00edkem. Jeliko\u017e ve firm\u011b \u010dasto nen\u00ed odborn\u00edk s po\u017eadovan\u00fdm profilem, stoj\u00ed za to pod\u00edvat se na auditory-konzultanty. Mnoh\u00e9 komplikovan\u00e9 momenty mohou b\u00fdt rozhodn\u011b nejasn\u00e9.<\/p>\n<p>Konzultace umo\u017en\u00ed ur\u010dit, s jak\u00fdmi osobn\u00edmi \u00fadaji m\u00e1te co do \u010din\u011bn\u00ed a jak\u00fd \u00farove\u0148 ochrany pot\u0159ebuj\u00ed. Tud\u00ed\u017e z\u00edsk\u00e1te p\u0159edstavu o IS, kterou je t\u0159eba vytvo\u0159it nebo doplnit ochrann\u00fdmi prost\u0159edky a O\u0158D.<\/p>\n<p>\u010casto m\u00e1 firma na v\u00fdb\u011br ze dvou mo\u017enost\u00ed:<\/p>\n<ol>\n<li>\n<p>Postavit p\u0159\u00edslu\u0161n\u00fd IS na sv\u00fdch softwarov\u00fdch a hardwarov\u00fdch \u0159e\u0161en\u00edch, mo\u017en\u00e1 ve sv\u00e9 serverovn\u011b.<\/p>\n<\/li>\n<li>\n<p>Obra\u0165te se na cloudov\u00e9ho poskytovatele a vyberte flexibiln\u00ed \u0159e\u0161en\u00ed, ji\u017e certifikovanou takovou \"virtu\u00e1ln\u00ed serverovnu\".<\/p>\n<\/li>\n<\/ol>\n<p>V\u011bt\u0161ina IS, kter\u00e9 zpracov\u00e1vaj\u00ed PDu, pou\u017e\u00edv\u00e1 tradi\u010dn\u00ed p\u0159\u00edstup, kter\u00fd lze jen t\u011b\u017eko ozna\u010dit za snadn\u00fd a \u00fasp\u011b\u0161n\u00fd z hlediska podnik\u00e1n\u00ed. P\u0159i v\u00fdb\u011bru t\u00e9to varianty je nutn\u00e9 ch\u00e1pat, \u017ee technick\u00fd projekt bude zahrnovat popis za\u0159\u00edzen\u00ed, v\u010detn\u011b softwarov\u00fdch a hardwarov\u00fdch \u0159e\u0161en\u00ed a platforem. A to znamen\u00e1, \u017ee se budete muset pot\u00fdkat s n\u00e1sleduj\u00edc\u00edmi obt\u00ed\u017eemi a omezen\u00edmi:<\/p>\n<ul>\n<li>\n<p>slo\u017eitost \u0161k\u00e1lov\u00e1n\u00ed;<\/p>\n<\/li>\n<li>\n<p>dlouh\u00e1 doba realizace projektu: je t\u0159eba vybrat, zakoupit, nainstalovat, nastavit a popsat syst\u00e9m;<\/p>\n<\/li>\n<li>\n<p>mno\u017estv\u00ed \"pap\u00edrov\u00e9\" pr\u00e1ce, nap\u0159\u00edklad - vypracov\u00e1n\u00ed kompletn\u00edho bal\u00ed\u010dku dokumentace k cel\u00e9 ISPDn.<\/p>\n<\/li>\n<\/ul>\n<p>Krom\u011b toho se podnik\u00e1n\u00ed v\u011bt\u0161inou orientuje pouze na \"vrchn\u00ed\" \u00farove\u0148 sv\u00e9ho IS - v pou\u017e\u00edvan\u00fdch obchodn\u00edch aplikac\u00edch. Jin\u00fdmi slovy, IT person\u00e1l je kvalifikov\u00e1n ve sv\u00e9 \u00fazk\u00e9 oblasti. Chyb\u00ed ch\u00e1p\u00e1n\u00ed toho, jak funguj\u00ed v\u0161echny \"doln\u00ed \u00farovn\u011b\": softwarov\u00e1 a hardwarov\u00e1 ochrann\u00e1 za\u0159\u00edzen\u00ed, syst\u00e9my uchov\u00e1v\u00e1n\u00ed, z\u00e1lohov\u00e1n\u00ed a samoz\u0159ejm\u011b, jak s dodr\u017eov\u00e1n\u00edm v\u0161ech po\u017eadavk\u016f nastavit ochrann\u00e9 prost\u0159edky a vybudovat \"\u017eeleznou\" \u010d\u00e1st konfigurace. Je d\u016fle\u017eit\u00e9 ch\u00e1pat: to je obrovsk\u00fd objem znalost\u00ed, kter\u00e9 le\u017e\u00ed za hranicemi podnik\u00e1n\u00ed klienta. Pr\u00e1v\u011b zde m\u016f\u017ee b\u00fdt zku\u0161enost cloudov\u00e9ho poskytovatele, kter\u00fd poskytuje certifikovanou \"virtu\u00e1ln\u00ed serverovnu\".<\/p>\n<p>Cloud providers, in turn, have a number of advantages that can, without exaggeration, meet 99% of business needs in personal data protection:<\/p>\n<ul>\n<li>\n<p>capital expenditures are converted into operational ones;<\/p>\n<\/li>\n<li>\n<p>the provider guarantees the required level of security and availability based on a proven standard solution;<\/p>\n<\/li>\n<li>\n<p>there is no need to maintain a staff of specialists to ensure the operation of personal data information systems at the hardware level;<\/p>\n<\/li>\n<li>\n<p>providers offer much more flexible and adaptable solutions;<\/p>\n<\/li>\n<li>\n<p>the provider's specialists have all the necessary certifications;<\/p>\n<\/li>\n<li>\n<p>compliance is no less than when building your own architecture, taking into account the requirements and recommendations of regulators.<\/p>\n<\/li>\n<\/ul>\n<p>The old myth that personal data cannot be hosted in the cloud is still remarkably popular. It is only partially true: personal data cannot indeed be placed <em>in just any<\/em> cloud. Certain technical measures, as well as the application of specific certified solutions, must be adhered to. If the provider complies with all legal requirements, the risks associated with personal data leakage are minimized. Many providers have a separate infrastructure for processing personal data in accordance with 152-FZ. However, choosing a supplier must also be approached with knowledge of certain criteria, which we will definitely discuss below.&nbsp;<\/p>\n<p>Clients often come to us with some concerns regarding the placement of personal data in the provider's cloud. Well, let's discuss them right away.<\/p>\n<ul>\n<li>\n<p>Data can be stolen during transmission or migration.<\/p>\n<\/li>\n<\/ul>\n<p>There is no need to worry about this \u2014 the provider offers the client the establishment of a secure data transmission channel, built on certified solutions, along with enhanced authentication measures for counterparties and employees. The choice of suitable protection methods remains, and they must be implemented within the client collaboration.<\/p>\n<ul>\n<li>\n<p>Masked shows will come and take\/secure\/power down the server.<\/p>\n<\/li>\n<\/ul>\n<p>Je zcela pochopiteln\u00e9, \u017ee z\u00e1kazn\u00edci maj\u00ed obavy, \u017ee jejich obchodn\u00ed procesy budou naru\u0161eny nedostate\u010dnou kontrolou nad infrastrukturou. Obvykle nad t\u00edmto p\u0159em\u00fd\u0161lej\u00ed ti klienti, jejich\u017e hardware byl d\u0159\u00edve um\u00edst\u011bn v mal\u00fdch serverovn\u00e1ch, nikoli ve specializovan\u00fdch datov\u00fdch centrech. Ve skute\u010dnosti jsou datov\u00e1 centra vybavena modern\u00edmi prost\u0159edky jak fyzick\u00e9, tak informa\u010dn\u00ed ochrany. Jak\u00e9koli operace v takov\u00e9m datov\u00e9m centru jsou prakticky nemo\u017en\u00e9 prov\u00e9st bez dostate\u010dn\u00fdch d\u016fvod\u016f a dokumentace, a tyto aktivity vy\u017eaduj\u00ed dodr\u017eov\u00e1n\u00ed cel\u00e9ho \u0159ady procedur. Nav\u00edc \u201evytr\u017een\u00ed\u201c va\u0161eho serveru z datov\u00e9ho centra m\u016f\u017ee zas\u00e1hnout dal\u0161\u00ed klienty poskytovatele, a to nikdo nechce. Krom\u011b toho nikdo nebude moci uk\u00e1zat prstem na \u201ev\u00e1\u0161\u201c virtu\u00e1ln\u00ed server, tak\u017ee pokud by se n\u011bkdo rozhodl ho ukr\u00e1st nebo uspo\u0159\u00e1dat razii, nejprve by se musel pot\u00fdkat s celou \u0159adou byrokratick\u00fdch p\u0159ek\u00e1\u017eek. Za tu dobu se pravd\u011bpodobn\u011b n\u011bkolikr\u00e1t \u00fasp\u011b\u0161n\u011b p\u0159est\u011bhujete na jinou platformu.<\/p>\n<ul>\n<li>\n<p>Hacke\u0159i prolom\u00ed cloudu a ukradnou data<\/p>\n<\/li>\n<\/ul>\n<p>Internet a ti\u0161t\u011bn\u00e1 m\u00e9dia se hem\u017e\u00ed titulky o tom, jak dal\u0161\u00ed cloud padl za ob\u011b\u0165 kyberzlo\u010dinc\u016fm, a miliony z\u00e1znam\u016f s osobn\u00edmi \u00fadaji unikly do s\u00edt\u011b. Ve v\u011bt\u0161in\u011b p\u0159\u00edpad\u016f byly zranitelnosti objeveny nikoli u poskytovatele, ale v informa\u010dn\u00edch syst\u00e9mech ob\u011bt\u00ed: slab\u00e1 nebo dokonce v\u00fdchoz\u00ed hesla, \u201ed\u00edry\u201c v enginech webov\u00fdch str\u00e1nek a datab\u00e1z\u00edch, a tomu, jak nedbal\u00e9 podniky p\u0159istupuj\u00ed k volb\u011b ochrann\u00fdch prost\u0159edk\u016f a organizaci p\u0159\u00edstupov\u00fdch procedur k dat\u016fm. V\u0161echna certifikovan\u00e1 \u0159e\u0161en\u00ed jsou kontrolov\u00e1na na p\u0159\u00edtomnost zranitelnost\u00ed. My tak\u00e9 pravideln\u011b prov\u00e1d\u00edme \u201ekontroln\u00ed\u201c penetra\u010dn\u00ed testy a audity bezpe\u010dnosti jak samostatn\u011b, tak s pomoc\u00ed extern\u00edch organizac\u00ed. Pro poskytovatele to je ot\u00e1zka reputace a obchodn\u00edho \u00fasp\u011bchu celkov\u011b.<\/p>\n<ul>\n<li>\n<p>Poskytovatel\/zam\u011bstnanci poskytovatele ukradnou osobn\u00ed \u00fadaje pro osobn\u00ed zisk<\/p>\n<\/li>\n<\/ul>\n<p>Je to pom\u011brn\u011b citliv\u00e1 z\u00e1le\u017eitost. \u0158ada spole\u010dnost\u00ed v oblasti kybernetick\u00e9 bezpe\u010dnosti \"stra\u0161\u00ed\" sv\u00e9 klienty a trv\u00e1 na tom, \u017ee \"intern\u00ed zam\u011bstnanci jsou nebezpe\u010dn\u011bj\u0161\u00ed ne\u017e hacke\u0159i zven\u010d\u00ed\". Mo\u017en\u00e1, \u017ee v n\u011bkter\u00fdch p\u0159\u00edpadech je to pravda, ale podnik\u00e1n\u00ed nelze postavit bez d\u016fv\u011bry. Ob\u010das se objev\u00ed zpr\u00e1vy o tom, \u017ee vlastn\u00ed zam\u011bstnanci organizac\u00ed prod\u00e1vaj\u00ed \u00fadaje klient\u016f zlo\u010dinc\u016fm, a vnit\u0159n\u00ed zabezpe\u010den\u00ed je \u010dasto organizov\u00e1no mnohem h\u016f\u0159e ne\u017e to extern\u00ed. Je d\u016fle\u017eit\u00e9 si uv\u011bdomit, \u017ee jak\u00fdkoli velk\u00fd poskytovatel rozhodn\u011b nem\u00e1 z\u00e1jem na negativn\u00edch p\u0159\u00edpadech. \u010cinnosti zam\u011bstnanc\u016f poskytovatele jsou pe\u010dliv\u011b regulov\u00e1ny, role a odpov\u011bdnosti jsou rozd\u011bleny. V\u0161echny obchodn\u00ed procesy jsou navr\u017eeny tak, aby byly p\u0159\u00edpady \u00faniku dat velmi nepravd\u011bpodobn\u00e9 a v\u017edy viditeln\u00e9 pro intern\u00ed slu\u017eby, proto se klienti nemus\u00ed ob\u00e1vat probl\u00e9m\u016f z t\u00e9to strany.<\/p>\n<ul>\n<li>\n<p>Plat\u00edte m\u00e1lo, proto\u017ee slu\u017eby plat\u00edte daty sv\u00e9ho podnik\u00e1n\u00ed.<\/p>\n<\/li>\n<\/ul>\n<p>Dal\u0161\u00ed m\u00fdtus: klient, kter\u00fd si pronaj\u00edm\u00e1 chr\u00e1n\u011bnou infrastrukturu za p\u0159ijatelnou cenu, ve skute\u010dnosti za ni plat\u00ed sv\u00fdmi \u00fadaji \u2013 tak \u010dasto uva\u017euj\u00ed specialist\u00e9, kte\u0159\u00ed by si p\u0159ed span\u00edm r\u00e1di p\u0159e\u010detli p\u00e1r konspira\u010dn\u00edch teori\u00ed. Za prv\u00e9, mo\u017enost prov\u00e1d\u011bn\u00ed jak\u00fdchkoli operac\u00ed s va\u0161imi \u00fadaji nad r\u00e1mec toho, co je uvedeno v p\u0159\u00edkazu, je v podstat\u011b nulov\u00e1. Za druh\u00e9, rozumn\u00fd poskytovatel si cen\u00ed vztah\u016f s v\u00e1mi a sv\u00e9 reputace \u2013 krom\u011b v\u00e1s m\u00e1 tak\u00e9 mnoho dal\u0161\u00edch klient\u016f. Pravd\u011bpodobn\u011bj\u0161\u00ed je opa\u010dn\u00fd sc\u00e9n\u00e1\u0159, kdy poskytovatel bude horliv\u011b chr\u00e1nit \u00fadaje sv\u00fdch klient\u016f, na kter\u00fdch do zna\u010dn\u00e9 m\u00edry z\u00e1vis\u00ed i jeho podnik\u00e1n\u00ed.<\/p>\n<h2>Jak vybrat cloudov\u00e9ho poskytovatele pro zabezpe\u010den\u00ed osobn\u00edch \u00fadaj\u016f<\/h2>\n<p>Dnes trh nab\u00edz\u00ed \u0159adu \u0159e\u0161en\u00ed pro spole\u010dnosti, kter\u00e9 jsou oper\u00e1tory ochrany osobn\u00edch \u00fadaj\u016f. N\u00ed\u017ee uv\u00e1d\u00edme obecn\u00fd seznam doporu\u010den\u00ed pro v\u00fdb\u011br vhodn\u00e9ho.<\/p>\n<ul>\n<li>\n<p>Poskytovatel by m\u011bl b\u00fdt p\u0159ipraven uzav\u0159\u00edt ofici\u00e1ln\u00ed smlouvu s popisem povinnost\u00ed stran, SLA a z\u00f3n odpov\u011bdnosti v oblasti zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f. V podstat\u011b by mezi v\u00e1mi a poskytovatelem, krom\u011b smlouvy na slu\u017ebu, m\u011bla b\u00fdt podeps\u00e1na dohoda o zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f. V ka\u017ed\u00e9m p\u0159\u00edpad\u011b stoj\u00ed za to je pe\u010dliv\u011b prostudovat. Je d\u016fle\u017eit\u00e9 porozum\u011bt rozd\u011blen\u00ed z\u00f3n odpov\u011bdnosti mezi v\u00e1mi a poskytovatelem.<\/p>\n<\/li>\n<li>\n<p>V\u011bnujte pozornost tomu, \u017ee segment mus\u00ed spl\u0148ovat po\u017eadavky, a tedy m\u00edt osv\u011bd\u010den\u00ed s uvedenou \u00farovn\u00ed zabezpe\u010den\u00ed, kter\u00e1 nen\u00ed ni\u017e\u0161\u00ed, ne\u017e je po\u017eadov\u00e1no pro va\u0161i IS. N\u011bkdy poskytovatel\u00e9 zve\u0159ej\u0148uj\u00ed pouze prvn\u00ed str\u00e1nku osv\u011bd\u010den\u00ed, ze kter\u00e9 nen\u00ed mnoho srozumiteln\u00e9ho, nebo odkazuj\u00ed na audit \u010di postupy shody, ani\u017e by publikovali samotn\u00e9 osv\u011bd\u010den\u00ed (\"byl tam chlapec?\"). Stoj\u00ed za to o n\u011bj po\u017e\u00e1dat \u2014 je to ve\u0159ejn\u00fd dokument, ve kter\u00e9m je uvedeno, kdo provedl certifikaci, doba platnosti, um\u00edst\u011bn\u00ed cloudu atd.<\/p>\n<\/li>\n<li>\n<p>Poskytovatel by m\u011bl poskytovat informace o tom, kde se nach\u00e1zej\u00ed jeho m\u00edsta (objekty ochrany), abyste mohli kontrolovat um\u00edst\u011bn\u00ed sv\u00fdch dat. P\u0159ipom\u00edn\u00e1me, \u017ee prvotn\u00ed sb\u011br PII mus\u00ed prob\u00edhat na \u00fazem\u00ed RF, a proto je \u017e\u00e1douc\u00ed, aby v smlouv\u011b\/osv\u011bd\u010den\u00ed byly viditeln\u00e9 adresy datov\u00fdch center.<\/p>\n<\/li>\n<li>\n<p>Poskytovatel by m\u011bl pou\u017e\u00edvat certifikovan\u00e9 prost\u0159edky ochrany a skryt\u00ed. Samoz\u0159ejm\u011b, v\u011bt\u0161ina poskytovatel\u016f nezve\u0159ej\u0148uje pou\u017e\u00edvan\u00e9 technick\u00e9 prost\u0159edky ochrany a architekturu \u0159e\u0161en\u00ed. Ale jako klient se o tom nem\u016f\u017eete nedozv\u011bd\u011bt. Nap\u0159\u00edklad pro vzd\u00e1len\u00e9 p\u0159ipojen\u00ed k syst\u00e9mu \u0159\u00edzen\u00ed (port\u00e1lu spr\u00e1vy) je nezbytn\u00e9 pou\u017e\u00edt ochrann\u00e9 prost\u0159edky. Poskytovatel se tomuto po\u017eadavku nem\u016f\u017ee vyhnout a poskytne v\u00e1m (nebo vy\u017e\u00e1d\u00e1 po v\u00e1s, abyste pou\u017e\u00edvali) certifikovan\u00e1 \u0159e\u0161en\u00ed. Otestujte zdroje a ihned pochop\u00edte, jak a co je uspo\u0159\u00e1d\u00e1no.&nbsp;<\/p>\n<\/li>\n<li>\n<p>Je velmi \u017e\u00e1douc\u00ed, aby cloudov\u00fd poskytovatel nab\u00edzel dal\u0161\u00ed slu\u017eby v oblasti informa\u010dn\u00ed bezpe\u010dnosti. M\u016f\u017ee se jednat o r\u016fzn\u00e9 slu\u017eby: ochrana p\u0159ed DDoS \u00fatoky a WAF, antivirov\u00e1 slu\u017eba nebo sandbox atd. To v\u0161e v\u00e1m umo\u017en\u00ed z\u00edskat ochranu jako slu\u017ebu, ani\u017e byste se museli soust\u0159edit na budov\u00e1n\u00ed syst\u00e9m\u016f ochrany a v\u011bnovat se obchodn\u00edm aplikac\u00edm.<\/p>\n<\/li>\n<li>\n<p>Poskytovatel by m\u011bl m\u00edt licenci FSTEC a FSB. Obvykle je tato informace uvedena p\u0159\u00edmo na webov\u00fdch str\u00e1nk\u00e1ch. Ur\u010dit\u011b si tyto dokumenty vy\u017e\u00e1dejte a zkontrolujte, zda jsou spr\u00e1vn\u011b uvedeny adresy poskytov\u00e1n\u00ed slu\u017eeb, n\u00e1zev spole\u010dnosti poskytovatele atd.&nbsp;<\/p>\n<\/li>\n<\/ul>\n<p>Shr\u0148me to. Pron\u00e1jem infrastruktury umo\u017en\u00ed vzd\u00e1t se CAPEX a nechat si na sv\u00e9 odpov\u011bdnosti pouze sv\u00e9 obchodn\u00ed aplikace a samotn\u00e1 data, zat\u00edmco t\u011b\u017ek\u00e9 b\u0159emeno certifikace \u201ehardwaru\u201c a softwarov\u00fdch prost\u0159edk\u016f p\u0159evezme poskytovatel.<\/p>\n<h3>Jak jsme pro\u0161li certifikac\u00ed<\/h3>\n<p>Ned\u00e1vno jsme \u00fasp\u011b\u0161n\u011b pro\u0161li p\u0159ezkou\u0161en\u00edm infrastruktury \u201eOchrann\u00e9 cloudov\u00e9 slu\u017eby FZ-152\u201c na shodu s po\u017eadavky pro pr\u00e1ci s osobn\u00edmi \u00fadaji. Pr\u00e1ce prov\u00e1d\u011bl \u201eN\u00e1rodn\u00ed certifika\u010dn\u00ed centrum\u201c.<\/p>\n<p>V tuto chv\u00edli je \u201eOchrann\u00e9 cloudov\u00e9 slu\u017eby FZ-152\u201c certifikov\u00e1no pro um\u00edst\u011bn\u00ed informa\u010dn\u00edch syst\u00e9m\u016f, kter\u00e9 se \u00fa\u010dastn\u00ed zpracov\u00e1n\u00ed, uchov\u00e1v\u00e1n\u00ed nebo p\u0159enosu osobn\u00edch \u00fadaj\u016f (ISPU) v souladu s po\u017eadavky \u00farovn\u011b UZ-3.<\/p>\n<p>Certifika\u010dn\u00ed postup zahrnuje kontrolu shody infrastruktury cloudov\u00e9ho poskytovatele s \u00farovn\u00ed ochrany. Samotn\u00fd poskytovatel poskytuje slu\u017ebu IaaS a nen\u00ed oper\u00e1torem osobn\u00edch \u00fadaj\u016f. Proces zahrnuje hodnocen\u00ed jak organiza\u010dn\u00edch (dokumentace, na\u0159\u00edzen\u00ed atd.), tak technick\u00fdch opat\u0159en\u00ed (nastaven\u00ed ochrann\u00fdch syst\u00e9m\u016f a dal\u0161\u00ed).<\/p>\n<p>Nen\u00ed to ban\u00e1ln\u00ed. I kdy\u017e standard pro programy a metodiky prov\u00e1d\u011bn\u00ed certifika\u010dn\u00edch akc\u00ed existuje od roku 2013, pro cloudov\u00e9 objekty st\u00e1le neexistuj\u00ed p\u0159\u00edsn\u00e9 programy. Certifika\u010dn\u00ed centra tyto programy vypracov\u00e1vaj\u00ed na z\u00e1klad\u011b vlastn\u00ed odbornosti. S p\u0159\u00edchodem nov\u00fdch technologi\u00ed se programy komplikuj\u00ed a modernizuj\u00ed, a proto mus\u00ed certifik\u00e1tor m\u00edt zku\u0161enosti s cloudov\u00fdmi \u0159e\u0161en\u00edmi a rozum\u011bt specifice.<\/p>\n<p>V na\u0161em p\u0159\u00edpad\u011b se objekt ochrany skl\u00e1d\u00e1 ze dvou lokalit.<\/p>\n<ul>\n<li>\n<p>P\u0159\u00edmo v datov\u00e9m centru jsou um\u00edst\u011bny cloudov\u00e9 zdroje (servery, \u00falo\u017ei\u0161t\u011b dat, s\u00ed\u0165ov\u00e1 infrastruktura, ochrann\u00e9 prost\u0159edky atd.). Rozhodn\u011b je takov\u00fd virtu\u00e1ln\u00ed datov\u00fd centrum p\u0159ipojeno k ve\u0159ejn\u00fdm s\u00edt\u00edm, a proto mus\u00ed b\u00fdt spln\u011bny ur\u010dit\u00e9 po\u017eadavky na firewallov\u00e1n\u00ed, nap\u0159\u00edklad pou\u017eit\u00ed certifikovan\u00fdch firewall\u016f.<\/p>\n<\/li>\n<li>\n<p>Druh\u00e1 \u010d\u00e1st objektu \u2014 prost\u0159edky \u0159\u00edzen\u00ed cloudu. To jsou pracovn\u00ed stanice (ARM administr\u00e1tora), odkud se prov\u00e1d\u00ed spr\u00e1va chr\u00e1n\u011bn\u00e9ho segmentu.<\/p>\n<\/li>\n<\/ul>\n<p>Lokalit se spojuj\u00ed p\u0159es <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"131\">VPN<\/a>-kan\u00e1l, postaven\u00fd na SKZI.<\/p>\n<p>Proto\u017ee technologie virtualizace vytv\u00e1\u0159ej\u00ed p\u0159edpoklady pro vznik hrozeb, pou\u017e\u00edv\u00e1me tak\u00e9 dal\u0161\u00ed certifikovan\u00e9 ochrann\u00e9 prost\u0159edky.<\/p>\n<p><img decoding=\"async\" alt=\"IaaS 152-FZ: tak\u017ee pot\u0159ebujete zabezpe\u010den\u00ed\" src=\"\/wp-content\/uploads\/2020\/09\/611ca4c92615fffb675864b72dcaa2f8.jpg\" style=\"display:block;margin: 0 auto;\" \/>Struktur\u00e1ln\u00ed sch\u00e9ma \u201eo\u010dima certifik\u00e1tora\u201c<\/p>\n<p>Pokud klientovi pot\u0159ebuje certifikace jeho ISPDn, po pron\u00e1jmu IaaS mu zb\u00fdv\u00e1 pouze prov\u00e9st hodnocen\u00ed informa\u010dn\u00edho syst\u00e9mu nad \u00farovn\u00ed virtu\u00e1ln\u00edho datov\u00e9ho centra. Tato procedura zahrnuje kontrolu infrastruktury a pou\u017e\u00edvan\u00e9ho softwaru. Vzhledem k tomu, \u017ee na v\u0161echny infrastrukturn\u00ed ot\u00e1zky se m\u016f\u017eete odvolat na certifik\u00e1t poskytovatele, zbude v\u00e1m pouze prov\u00e9st pr\u00e1ce s softwarem.<\/p>\n<p><img decoding=\"async\" alt=\"IaaS 152-FZ: tak\u017ee pot\u0159ebujete zabezpe\u010den\u00ed\" src=\"\/wp-content\/uploads\/2020\/09\/4b0f5c72f8460c2a81068887efc8c9b1.jpg\" style=\"display:block;margin: 0 auto;\" \/>Rozd\u011blen\u00ed na \u00farovni abstrakce<\/p>\n<p>Na z\u00e1v\u011br p\u0159in\u00e1\u0161\u00edme mal\u00fd kontroln\u00ed seznam pro firmy, kter\u00e9 ji\u017e pracuj\u00ed s PDn nebo teprve pl\u00e1nuj\u00ed. A tak, jak zpracov\u00e1vat a nezap\u00e1lit se.<\/p>\n<ol>\n<li>\n<p>Pro audit a v\u00fdvoj model\u016f hrozeb a naru\u0161itel\u016f pozv\u011bte zku\u0161en\u00e9ho konzultanta z certifika\u010dn\u00edch laborato\u0159\u00ed, kter\u00fd v\u00e1m pom\u016f\u017ee vypracovat pot\u0159ebnou dokumentaci a dovede v\u00e1s ji\u017e k f\u00e1zi technick\u00fdch \u0159e\u0161en\u00ed.<\/p>\n<\/li>\n<li>\n<p>Ve f\u00e1zi v\u00fdb\u011bru cloudov\u00e9ho poskytovatele v\u011bnujte pozornost tomu, zda m\u00e1 certifik\u00e1t. Je dobr\u00e9, pokud firma ve\u0159ejn\u011b um\u00edstila tento certifik\u00e1t p\u0159\u00edmo na sv\u00fdch str\u00e1nk\u00e1ch. Poskytovatel by m\u011bl b\u00fdt licenci\u00e1tem FST\u00c9K a FSB, a nab\u00edzen\u00e1 slu\u017eba by m\u011bla b\u00fdt certifikov\u00e1na.<\/p>\n<\/li>\n<li>\n<p>Ujist\u011bte se, \u017ee m\u00e1te uzav\u0159enou ofici\u00e1ln\u00ed smlouvu a podeps\u00e1no pov\u011b\u0159en\u00ed na zpracov\u00e1n\u00ed PDn. Na z\u00e1klad\u011b toho budete moci prov\u00e9st jak kontrolu shody, tak certifikaci ISPDn. Pokud se v\u00e1m tyto pr\u00e1ce v r\u00e1mci technick\u00e9ho projektu a vytv\u00e1\u0159en\u00ed projektov\u00e9 a technick\u00e9 dokumentace zdaj\u00ed obt\u00ed\u017en\u00e9, stoj\u00ed za to obr\u00e1tit se na extern\u00ed konzulta\u010dn\u00ed spole\u010dnosti mezi certifika\u010dn\u00edmi laborato\u0159emi.<\/p>\n<\/li>\n<\/ol>\n<p>Pokud se pro v\u00e1s t\u00fdkaj\u00ed ot\u00e1zky zpracov\u00e1n\u00ed PDn, 18. z\u00e1\u0159\u00ed, v tento p\u00e1tek, budeme r\u00e1di, kdy\u017e v\u00e1s uvid\u00edme na webin\u00e1\u0159i. <noindex><a rel=\"nofollow\" href=\"https:\/\/event.it-grad.ru\/certification?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=anons18092020\"><u>\u201eSpecifika budov\u00e1n\u00ed certifikovan\u00fdch cloud\u016f\u201c<\/u><\/a><\/noindex>.<\/p>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/it-grad\/blog\/519276\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435 152-\u0424\u0417, \u0447\u0442\u043e-\u0442\u043e \u0432\u0441\u0435\u0433\u0434\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u043a\u0430\u0434\u0440\u043e\u043c. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0445\u043e\u0442\u0438\u043c \u043e\u0431\u0441\u0443\u0434\u0438\u0442\u044c \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0435 \u043d\u044e\u0430\u043d\u0441\u044b, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0442\u0430\u043a \u0438 \u0441\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f: \u0442\u043e\u043d\u043a\u043e\u0441\u0442\u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u041f\u0414\u043d \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u2014 \u043a\u043e\u0433\u0434\u0430 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438, \u0434\u0430\u0436\u0435 \u043d\u0435 \u0437\u043d\u0430\u044f \u043e\u0431 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94451,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94450","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47IaaS 152-\u0424\u0417: \u0438\u0442\u0430\u043a, \u0432\u0430\u043c \u043d\u0443\u0436\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-17T05:42:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-17T05:42:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47IaaS 152-FZ: Tak\u017ee pot\u0159ebujete bezpe\u010dnost | ProHoster","description":"Kolik m\u00fdt\u016f a legend, kter\u00fdmi se rozeb\u00edr\u00e1me.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47IaaS 152-\u0424\u0417: \u0438\u0442\u0430\u043a, \u0432\u0430\u043c \u043d\u0443\u0436\u043d\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c | ProHoster","og:description":"\u0421\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044b \u043d\u0438 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u043b\u0438 \u043c\u0438\u0444\u044b \u0438 \u043b\u0435\u0433\u0435\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/iaas-152-fz-itak-vam-nuzhna-bezopasnost","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-17T05:42:44+00:00","article:modified_time":"2020-09-17T05:42:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94450","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:26:28","updated":"2026-02-04 14:42:07","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/94450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=94450"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/94450\/revisions"}],"predecessor-version":[{"id":156760,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/94450\/revisions\/156760"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/94451"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=94450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=94450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=94450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}